Report Reveals Most Organisations Fear AI-driven Cyberattacks but Lack Key Defences

A recent Kaspersky study reveals that businesses are increasingly worried about the growing use of artificial intelligence (AI) in cyberattacks.

According to the findings, 70% of surveyed companies in the Middle East, Turkiye and Africa (META) region reported a rise in cyber incidents over the past year, with over half of respondents (53%) noting that many of these attacks were likely AI-driven.

The study underscores the reality that AI, which has revolutionised numerous industries, is now also empowering cybercriminals, adding an additional layer of complexity to the threats businesses face.

In its latest study titled “Cyber defense & AI: Are you ready to protect your organisation?” Kaspersky gathered the opinions of IT Security and Information Security professionals working for SMEs and Enterprise-level companies regarding new challenges in protecting their organisations against cyberattacks involving the use of AI.

Leveraging AI by cybercriminals is a serious concern for 73% of respondents from the META region. The pressure of this challenge is pushing companies to reassess their cybersecurity strategies and look for solutions that are both proactive and comprehensive.

To effectively tackle AI-amplified threats, businesses in the META region consider regular training to build internal expertise (94%), highly qualified personnel (94%), and relevant external cybersecurity expertise (93%) as the most important factors for protecting their organisations.

They also recognise the importance of having enough staff in their IT teams (91%) and using third-party security solutions (89%).

Despite rising awareness, the study reveals a concerning gap in readiness among many companies.

Over half of the organisations surveyed in the META region lack crucial resources needed to address these sophisticated threats – 56% don’t have the relevant external cybersecurity expertise at their disposal, 51% report that their IT teams are not large enough, 44% lack highly qualified staff, and 45% fall short in regular training efforts.

Additionally, 49% of respondents do not think they have adequate security solutions in place, exposing them to potential vulnerabilities. While most respondents claim to know how to address this lack of resources, the fact remains that they aren’t in place.

“The cybersecurity landscape today mirrors past challenges, with businesses questioning if current solutions suffice. Ransomware, once a primary threat, now demonstrates a dangerous surge, and business decision-makers start questioning the causes of this resurgence.

“The recent hype around AI offers an easy, if not entirely correct explanation. In reality, while using AI to create convincing phishing messages or more effective reconnaissance may be of some help, the root causes are most often more straightforward: cybercriminals have become more organised, better at collaborating, developing innovative attack strategies, and lowering the barriers for less skilled and resourceful attackers.

“So, while it’s useful to keep an eye on AI progress that can enable both attackers and defenders with new options, there are solid strategies companies can – and should – implement immediately.

“Companies should prioritise securing critical IT infrastructure with robust, multi-layered solutions that offer a unified security context. An XDR ecosystem, combined with skilled expertise – whether in-house or through a managed service – can greatly enhance defences.

“Additionally, ongoing employee training, including cybersecurity basics and safe AI practices, adds another critical layer of protection for the organisation,”  says Oleg Gorobets, corporate infrastructure protection expert at Kaspersky.